Stack Overflow
Stack Overflow

Questions tagged [ntdll]

NtDll.dll is the Windows system DLL exposing the Native API to user mode.

NtDll.dll is the Windows system DLL exposing the (Windows) Native API to user mode.

155 questions
0
votes
1 answer

Application crashes in windows 8.1

One of my windows application in [.net 3.5] is installed in windows 8.1, to upload images. I open the application, and I am using a dll to browse the images present in local disk to select and upload them. Once after browsing the selection of image…
Akon
  • 272
  • 1
  • 6
  • 20
0
votes
0 answers

program crash due to ntdll.dll

I've created a program (vs2010,c++,win7), it's a multithreaded and has modules. The program that communicates with some hardware. I run this program in a clean computer that has only win7 and the drivers of the hardware. After using my program…
David
  • 287
  • 2
  • 3
  • 13
0
votes
1 answer

looping NtQuerySystemInformation call in VB6

I have a VB6 application which has the following peice of code that appears to be attempting to access Windows Process information I think it may be the cause of an intermittent endless loop - REDIM-ming an array and chewing up all the memory. Is…
Andrew Humphries
  • 167
  • 3
  • 15
0
votes
0 answers

weird ntdll.dll error with OpenCV

I have encountered a strange error with a BMP image. It doesn't seem to have something to do with a corrupted file as I've created a new image where the same error occurs again. I don't know if it's important, I'm using Iphoto Plus 4 (very old…
user1331044
  • 83
  • 1
  • 11
0
votes
1 answer

Loading/calling ntdll from DllMain

One should not use functions other than those in kernel32.dll from DllMain: From MS documentation: Because Kernel32.dll is guaranteed to be loaded in the process address space when the entry-point function is called, calling functions in…
Roland Pihlakas
  • 4,246
  • 2
  • 43
  • 64
0
votes
0 answers

ntdll.dll error running c# service on Windows Server 2008 R2

I have a problem with a customer. I have a service who down once or twice per month. Windows Event viewer has an error : Nom de l’application défaillante MaintiMediaServeurService.exe, version : 3.8.600.21236, horodatage : 0x509a3c59 Nom du module…
Gwen
  • 1
  • 2
0
votes
1 answer

ntdll.dll is not found in POCO?

When I use HTTPSClientSession to run a program, it crashes because: NULL pointer: _pInstance [in file "c:\poco-1.4.3p1-all\util\include\poco\util\application.h,line 446] Then, I traced the stack, and found that ntdll.dll was not loaded, which I…
mac.ma
  • 703
  • 2
  • 8
  • 22
0
votes
1 answer

NtQueryInformationProcess seems to return wrong command line

I am using NtQueryInformationProcess() to retrieve the command line of another process (via the RTL_USER_PROCESS_PARAMETERS in the PEB returned by NtQueryInformationProcess()) on Windows 7. This generally works fine, but when multiple instances of…
kassiopeia
  • 615
  • 1
  • 9
  • 23
0
votes
1 answer

Windows Registry, how to add your Native-Program for boot-executing?

I have done my Native program for Windows. ( which, I've compiled with #pragma comment(linker, "/SUBSYSTEM:NATIVE")). I want to add my program to auto-executing list, how can I do it? My exact questions are: 1). How can I do it in Windows Registry (…
user1131997
-1
votes
1 answer

RtlSetProcessIsCritical vs NtSetInformationProcess

I want to set my process as critical. I understand all the risks, just want to know what to call. I tried the RtlSetProcessIsCritical method and it worked as it should. Though i tested it on Windows XP virtual machine, one website claimed that…
rusnuker
  • 1
  • 2
-1
votes
1 answer

NtProtectVirtualMemory return STATUS_ACCESS_VIOLATION?

I'm tried to invoke NtProtectVirtualMemory from my dll, that was attached to application using followed code: typedef NTSTATUS(__stdcall* tNtProtectVirtualMemory) (HANDLE, IN OUT PVOID*, IN OUT PULONG, IN ULONG, OUT PULONG); ... HMODULE Ntdll =…
CoreEntity
  • 3
  • 2
-1
votes
1 answer

Getting the name of a driver from the device object

I'm wondering if it's possible to get the name of a driver from the device that it created. Let's say I have a symbolic link that points to a device, \.\RTF64 -> \Device\RTF64. Is there any way to get the driver name (.sys) using just this…
CrantZ567
  • 1
  • 1
-1
votes
1 answer

DLL not found in redistributable (biddll.dll)

I’m having difficulty getting the sample code for tws api running. I’ve successfully run it on a borrowed laptop but the same version fails on my own windows 10 laptop. When running on Release mode in Win32, I get the popups The code execution…
grizzlyborg
  • 23
  • 6
-1
votes
2 answers

Create file or registry key without calling NTDLL.DLL

I know that ntdll is always present in the running process but is there a way (not necessarily supported/stable/guaranteed to work) to create a file/key without ever invoking ntdll functions?
ntdllnewbie.dll
  • 37
  • 4
-1
votes
1 answer

64-Bit Ntdll Has x86 Instruction Set?

I am trying to disassemble the 64-bit ntdll.dll using IDA. From my understand, this DLL is located in C:\Windows\System32 on a Windows 64-bit OS. When I disassemble this DLL, it shows 32-bit addresses and a 32-bit instruction set. However, in the…
rewioyrqew
  • 1
1 2 3
…
10
11